Internal Review Security Engineer II (Contract Contingent)

ProSidian seeks an Internal Review Security Engineer II located In Arlington, VA (or surrounding area) to support an engagement for Business Analysis and Management Support Services (BAMSS) on behalf of A Federal Government Agency.  The ProSidian Engagement includes but is not limited to Management & Operations Consulting related to non-personal service to: provide competent leadership, and highly specialized support and technical guidance for the planning, development and execution of the entire Technology development and Business Analysis and Management Support lifecycle.  Serve as a technical expert for Business Analysis and Management Support Team related activities with specialized experience in current Business Analysis and Management Support benchmarks, practices and testing methods.  

The Internal Review Security Engineer II serves as Information Security expert to review and assess the complete Certification and Accreditation (C&A) process lifecycle for The Federal Government Agency application and system components. Ability to leverage an in-depth knowledge of the C&A processes according to NIST standards is required to make formal technical and policy evaluations regarding C&A program, practices and packages. Serve as an authoritative subject matter expert concerning C&A and the family of controls outlined in NIST SP 800-53. NIST SP Series, including: 800-37, 800-53, 800-18, 800-26, 800-30, 800-34 and 800-53.

Effectively manage aggressive deadlines to respond to client inquiries and produce work of exceptional quality. Knowledgeable in OMB Circulars A-130, A-123 Appendix III, and FIPS-199. Experienced with the C&A methodology according to the NIST series of publications including 800-37, 800-18, 800-30, 800-34 and 800-53.

Strong knowledge of mainframe, network components, system security appliances, and custom application information flows. Ability to work both independently and in highly collaborative, team environments. Experience using network mapping software and system vulnerability scanners. Must be a Certified Information Systems Security Professional (CISSP) certification.